Effective 1-1-2026. Sec. 5. A controller shall establish, and shall describe in a privacy notice provided under section 3 of this chapter, one (1) or more secure and reliable means for consumers to submit a request to exercise their rights under IC 24-15-3 . Such means must take into account: (1) the ways in which consumers normally interact with the controller; (2) the need for the secure and reliable communication of such requests; and (3) the ability of the controller to authenticate the identity of the consumer making the request. A controller may not require a consumer to create a new account in order to exercise the consumer's rights under IC 24-15-3 but may require a consumer to use an existing account.
‹ Prev All Indiana sections Next ›
Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.